CrowdStrike Wants AI Agents Rechecked Before Every Action

An AI agent’s access can now be treated as a series of decisions rather than a privilege that lasts for a full login session. CrowdStrike highlighted that model, called Continuous Identity for AI Agents, during its Fal.Con 2026 keynote program in Las Vegas.

Access that expires with the job

CrowdStrike’s system continuously authorizes agent actions instead of trusting an agent for an entire session. It grants short-lived authorization for specific tasks and can revoke access when a task ends. Before approving an action, it evaluates the agent’s owner, the caller and the device’s risk posture.

A decision can be reversed

The design’s key operational feature is revocation after an initial approval. CrowdStrike says it can immediately remove access when the context changes, including when a vulnerability is discovered or an employee’s HR status changes. The company says the capability uses SPIFFE, an identity standard, and the Shared Signals Framework for real-time authorization.

The company’s stated control model

• Every action is assessed against both the agent’s and the human’s entitlements, plus current security and business context.
• A read/write agent acting for a read-only user can only read, CrowdStrike says.
• When an agent delegates to a sub-agent, the company says the human identity and permissions are preserved.

A second check on agent behavior

CrowdStrike says the capability is delivered through Falcon Next-Gen Identity Security and Falcon AI Detection and Response. The latter continuously inspects prompts and intent for permission misuse or attempts to manipulate a language model beyond its authorized scope, and can trigger revocation before damage is done.

The company’s case for speed

CrowdStrike researcher Adam Meyers said AI agents are generating roughly 250 times more detections than humans. Separately, CrowdStrike threat research cited in the article found that average eCrime breakout time had fallen to 29 minutes, with the fastest recorded intrusion at 27 seconds. Those company figures frame the push for access controls that can change while an agent is working.